URL-Phish: A Feature-Engineered Dataset for Phishing Detection

This dataset, named URL-Phish, is designed for phishing detection research. It contains 116 600 unique URLs divided into: • 100 000 benign samples (label = 0), collected from trusted sources including educational (.edu), governmental (.gov), and top-ranked domains. The benign dataset was obtained from the Research Organization Registry [1]. • 16 600 phishing samples (label = 1), obtained from the PhishTank repository [2] between November 2024 and September 2025. Each URL entry was automatically processed to extract 22 lexical and structural features, such as URL length, domain length, number of subdomains, digit ratio, entropy, and HTTPS usage. In addition, three reference columns (url, dom, tld) are preserved for interpretability. One label column is included (0 = benign, 1 = phishing). A data cleaning step removed duplicates and empty entries, followed by normalization of features to ensure consistency. The dataset is provided in CSV format, with 22 numerical feature columns, 3 string reference columns, and 1 label column (total = 26 columns). References [1] Research Organization Registry, “ROR Data.” Zenodo, Sept. 22, 2025. doi: 10.5281/ZENODO.6347574. [2] PhishTank, “PhishTank: Join the fight against phishing.” [Online]. Available: https://phishtank.org本数据集命名为URL-Phish，专为网络钓鱼检测研究设计。共包含116600个唯一URL，分为两类： • 100000个良性样本（标签为0），采集自教育域（.edu）、政府域（.gov）等可信来源及顶级域名。该良性数据集源自研究组织注册表（Research Organization Registry）[1]。 • 16600个钓鱼样本（标签为1），于2024年11月至2025年9月期间从PhishTank仓库[2]获取。 每个URL条目均经自动处理，提取22项词汇与结构特征，包括URL长度、域名长度、子域数量、数字占比、信息熵及HTTPS使用情况等。此外，保留3个参考列（url、dom、tld）以提升可解释性，并设置1个标签列（0代表良性，1代表钓鱼）。 数据集已完成数据清洗流程，移除重复项与空条目，并对特征进行归一化处理以保证一致性。本数据集以CSV格式提供，包含22个数值特征列、3个字符串参考列与1个标签列，总计26列。 参考文献 [1] 研究组织注册表（Research Organization Registry），"ROR数据"，Zenodo，2025年9月22日。DOI: 10.5281/ZENODO.6347574。 [2] PhishTank，"PhishTank：携手对抗网络钓鱼"，[在线]。可访问：https://phishtank.org